Table of Contents

Remote Syslog

Sending to Graylog rsyslog

# cat /etc/rsyslog.d/60.graylog.conf
# Send syslog to Graylog
*.* @@192.168.5.27:514;RSYSLOG_SyslogProtocol23Format

Cisco IOS

Set buffer on router to limit message loss

logging buffered 51200 warnings

service timestamps log datetime msec

logging trap notifications
logging origin-id hostname
logging facility local3
logging 192.168.1.1
logging host 192.168.5.27 transport udp port 11001